Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218713.roa
File: AS218713.roa (raw, json)
Hash identifier: /jEd5/QRw69fqmJttX7Vq8SPR3YthtFVaYvmDSgDtYY=
Subject key identifier: 45:07:4E:D9:51:D8:15:62:47:04:9C:B8:AB:4B:86:C1:07:A2:B2:5D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 647D52B6FAD0B556372900F8011766E9EA467437
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218713.roa
Signing time: Thu 10 Sep 2026 13:05:29 +0000
ROA not before: Thu 10 Sep 2026 13:00:29 +0000
ROA not after: Thu 09 Sep 2027 13:05:29 +0000
asID: 218713
IP address blocks: 2a14:7583:efd1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7d:52:b6:fa:d0:b5:56:37:29:00:f8:01:17:66:e9:ea:46:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 10 13:00:29 2026 GMT
Not After : Sep 9 13:05:29 2027 GMT
Subject: CN=45074ED951D8156247049CB8AB4B86C107A2B25D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:aa:fd:16:93:e1:c8:5b:50:3d:2f:c0:da:
16:20:c5:38:ab:cb:b2:3d:1d:30:41:39:bf:67:18:
f1:a1:c7:d5:97:eb:de:00:78:43:35:39:67:46:4c:
2b:51:a6:36:73:9e:eb:00:b6:07:40:06:18:83:95:
75:d4:1a:3f:77:e6:0d:76:10:a1:d2:74:6d:dd:71:
cb:39:fb:5e:23:e0:4d:cd:85:f5:83:a8:7a:8f:b1:
f2:32:39:2f:e9:6c:ed:82:ab:e3:8d:1b:b3:9f:43:
27:64:e8:12:7c:37:51:e1:30:a0:45:74:c3:f2:87:
56:ad:54:0c:42:28:ef:0b:79:fb:9e:13:d8:d2:9d:
1b:d8:a0:a7:69:de:60:8d:a5:7e:f2:c8:9b:87:a3:
e1:d8:f2:f1:cf:48:dd:fd:7d:58:8d:74:72:f4:5a:
57:03:44:d7:59:8c:3b:70:c4:93:b8:e6:92:e0:e6:
54:15:7d:b9:95:d8:b0:8b:8a:d9:0a:04:be:ce:86:
f2:23:c2:68:d2:8f:39:2a:c9:ef:7b:6b:46:54:25:
4d:45:2e:88:3d:06:d5:d7:9f:b2:77:6c:08:13:80:
74:e5:f8:0d:78:c5:5b:d0:88:c2:e1:8d:cb:60:a6:
50:b4:75:d8:92:d3:34:45:cb:d7:f3:2c:e6:d3:37:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:4E:D9:51:D8:15:62:47:04:9C:B8:AB:4B:86:C1:07:A2:B2:5D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218713.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efd1::/48
Signature Algorithm: sha256WithRSAEncryption
7a:09:09:2b:ae:3c:33:e2:5c:9f:c7:e3:84:62:0f:28:a8:59:
d6:db:8d:a0:08:c5:df:94:42:79:da:b0:1a:9a:d6:0f:b9:90:
6c:a8:6a:93:e3:80:5a:64:10:18:93:29:91:ff:f3:a3:30:29:
c5:2b:3e:d2:ea:85:6a:32:52:f8:11:03:d7:49:3d:23:58:27:
f3:3d:1a:55:ca:62:63:21:d4:cc:ed:dd:7a:2b:3c:10:3f:ff:
83:d0:38:bd:a3:31:87:03:f7:48:cf:30:ca:2e:ba:57:5c:c9:
a6:5a:19:fc:e5:43:a7:d2:28:f3:fc:e8:f3:ec:e2:9a:72:41:
ef:02:01:ac:71:9f:40:bf:73:c9:c1:16:8a:03:31:88:ab:f6:
0e:0c:2d:d3:b9:39:0f:18:43:f9:9f:8d:39:f8:d3:89:71:71:
18:bd:19:c7:c8:59:f0:c9:b6:3a:e3:b2:ad:bb:f8:f0:e9:f1:
0d:4e:8e:f9:34:34:db:50:ef:42:f4:8d:2e:d8:8c:f1:c7:31:
63:88:09:34:fd:9a:fe:f9:fd:11:f5:62:61:f7:75:5d:5c:2e:
2b:7d:b1:b8:ff:50:31:9d:0f:64:57:4f:fa:7b:b6:67:02:18:
c6:d3:d2:32:1c:d9:4c:73:7e:63:94:bc:b6:de:c0:ac:29:1c:
35:b0:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 19:28:10 2026 by rpki-client